
$ rpki-client -vvf rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/C74D18CE0E7811EF85000B7BC4F9AE02.roa
File: C74D18CE0E7811EF85000B7BC4F9AE02.roa (raw, json)
Hash identifier: q/oyJF+c7xMBWWu1hrOqXPzTS58cWYtyCiOvHXnwGqs=
Subject key identifier: F2:D5:2A:A8:19:66:52:E9:79:8F:F4:00:DB:F2:63:1F:41:51:95:78
Certificate issuer: /CN=A91514B1/serialNumber=6171432D5594CB3F608D3BE0F52600BBEC46E5FB
Certificate serial: 068B
Authority key identifier: 61:71:43:2D:55:94:CB:3F:60:8D:3B:E0:F5:26:00:BB:EC:46:E5:FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/C74D18CE0E7811EF85000B7BC4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:37:07 +0000
ROA not before: Sun 03 Aug 2025 00:06:21 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 132713
IP address blocks: 220.101.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl
rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:04:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1675 (0x68b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91514B1, serialNumber=6171432D5594CB3F608D3BE0F52600BBEC46E5FB
Validity
Not Before: Aug 3 00:06:21 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a48753-0202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7b:22:1b:33:29:96:30:b3:7c:24:a6:7d:a2:
17:e7:16:e3:a5:fa:f9:4c:35:1d:71:96:e5:cd:fa:
57:d7:c8:3a:23:92:07:72:14:a5:fe:a2:89:8e:ae:
e5:27:51:af:b1:f5:c9:37:cd:d1:9d:11:ab:79:e6:
18:eb:1f:97:9b:dc:fb:99:d8:65:fe:fb:03:38:8e:
59:df:db:72:93:02:17:f1:e9:6d:48:d2:c1:c6:6f:
65:b1:1e:fe:97:c0:72:0c:a8:a9:04:d8:8b:df:9c:
10:08:2b:e8:fa:aa:9a:fb:14:a9:b1:74:7f:66:94:
e2:df:96:05:8f:51:49:d3:97:79:bc:e8:b9:5c:cc:
5f:a5:24:f2:50:1d:02:63:ad:66:84:bc:68:ab:48:
31:54:91:cb:14:86:d2:ab:86:1d:20:43:f7:9f:cf:
d8:73:11:88:88:20:12:2e:15:cb:ae:61:36:16:e7:
b8:10:40:24:9d:fe:78:8d:51:94:67:e8:57:ea:d1:
42:27:9e:94:dc:9d:dd:9d:25:df:67:c7:1a:ac:2c:
7b:c4:c8:0b:a5:69:46:84:bd:bd:79:25:6f:82:8f:
d5:db:af:c9:b7:82:3a:47:13:e5:9c:6f:61:09:06:
2a:63:a0:34:bf:1d:90:42:de:31:d4:bd:31:fd:09:
61:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:D5:2A:A8:19:66:52:E9:79:8F:F4:00:DB:F2:63:1F:41:51:95:78
X509v3 Authority Key Identifier:
keyid:61:71:43:2D:55:94:CB:3F:60:8D:3B:E0:F5:26:00:BB:EC:46:E5:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/C74D18CE0E7811EF85000B7BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
220.101.96.0/24
Signature Algorithm: sha256WithRSAEncryption
33:ae:e1:e2:ce:c3:95:b1:0c:d4:84:4b:76:46:10:e0:a2:0d:
8a:d7:8c:a2:d1:c7:70:e1:ce:fe:21:2a:f4:9b:4d:cc:07:e3:
bf:69:72:98:a0:f4:16:bc:98:bf:91:af:7f:18:f5:de:8f:a5:
4f:87:1d:d8:cd:8c:00:13:84:86:bb:d1:88:2d:e5:b9:a5:5d:
09:37:82:12:8b:a7:a8:a3:25:66:c9:e0:13:50:12:5a:19:b8:
cb:99:b7:f8:e2:7e:03:54:cf:27:6f:35:08:24:a3:be:d0:ae:
73:71:e6:6a:62:08:d4:8a:c7:a7:3b:36:5d:1f:19:d2:df:c2:
e3:25:47:be:64:2a:2d:63:f8:4b:a8:a3:a7:dc:51:93:6e:8c:
b1:56:24:bf:01:62:ba:94:23:15:34:fa:dc:65:34:35:61:e5:
47:3f:73:2d:fc:f5:d0:94:5f:70:2b:d2:aa:da:78:6b:12:d5:
75:af:2f:3a:76:8d:f3:2f:93:50:17:b5:50:8b:6f:81:0a:5d:
55:55:50:ca:fe:d7:b7:7a:51:b8:23:7e:d9:2f:a0:c4:39:11:
f5:fa:db:af:e3:56:c3:9b:21:0c:22:68:a0:48:fa:f8:46:ef:
48:a1:4d:79:1a:0d:3e:a0:31:07:69:e1:06:6a:b4:28:97:27:
64:2c:94:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:36:47 2026 by rpki-client